# Parsing syslogs from different Cisco devices to Logstash
**URL:** https://discuss.elastic.co/t/parsing-syslogs-from-different-cisco-devices-to-logstash/74680
**Category:** Logstash
**Created:** [February 10, 2017, 3:22pm UTC](https://discuss.elastic.co/t/parsing-syslogs-from-different-cisco-devices-to-logstash/74680 "2017-02-10T15:22:48Z")
**Posts on this page:** 4
**Page:** 1
### Author:  [@Rinat](https://discuss.elastic.co/u/Rinat)
#### Post date: [February 10, 2017, 3:22pm UTC](https://discuss.elastic.co/t/parsing-syslogs-from-different-cisco-devices-to-logstash/74680/1 "2017-02-10T15:22:48Z")
My scenario is as follows: rsyslog server collects logs from different Cisco gears. It then forwards it to Logstash as syslogs type.
Are there any configuration examples for Logstash to filter all the different Cisco devices? Any examples of filters/config files?
Running 5.1 on RHEL 6.
---
### Author:  [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)
#### Post date: [February 13, 2017, 10:39am UTC](https://discuss.elastic.co/t/parsing-syslogs-from-different-cisco-devices-to-logstash/74680/2 "2017-02-13T10:39:29Z")
There are a bunch of Cisco patterns bundled with Logstash:
>
---
### Author:  [@Rinat](https://discuss.elastic.co/u/Rinat)
#### Post date: [February 13, 2017, 6:41pm UTC](https://discuss.elastic.co/t/parsing-syslogs-from-different-cisco-devices-to-logstash/74680/3 "2017-02-13T18:41:44Z")
Thanks!
My understanding is that I need to include those lines inside grok filter? How would I go about it?
Best regards,
Rinat
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [March 13, 2017, 6:42pm UTC](https://discuss.elastic.co/t/parsing-syslogs-from-different-cisco-devices-to-logstash/74680/4 "2017-03-13T18:42:27Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.